Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer
File: 9Ub1yAw8qCz0jdq7Y8YEamgSt0M.cer (raw, json)
Hash identifier: r6x/nUmcbzwB1CW5PnhnxGoqeyxF8ScyA3b4H3Bppws=
Subject key identifier: F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA1109E9F3FBEF95D198EA4E132972
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a14:400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:11:09:e9:f3:fb:ef:95:d1:98:ea:4e:13:29:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f546f5c80c3ca82cf48ddabb63c6046a6812b743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:24:6e:a7:ec:6d:11:b8:75:c8:8a:3d:9b:
8c:5e:59:eb:60:f8:fa:b1:03:49:e4:7e:cf:4b:c8:
a1:06:a5:79:d6:6b:a4:76:1d:43:99:f5:b4:45:de:
b3:e4:b7:d5:df:00:2c:59:3d:18:c5:51:f5:6a:a2:
dd:a1:02:aa:96:e1:34:e4:aa:45:05:fc:8a:7f:a7:
9f:69:7c:10:7c:9d:f1:d2:df:11:e8:73:94:ea:67:
ca:fd:8a:17:8c:6d:f1:af:23:eb:5f:75:42:3b:40:
fa:cf:0c:ef:a0:02:7a:74:68:7e:25:e1:b9:87:65:
d1:6e:31:73:44:d4:cb:3d:cd:69:27:99:3f:83:ab:
1d:4c:a2:c0:9a:f1:7d:f0:59:81:44:58:ef:bc:13:
3f:41:aa:37:17:7f:e8:b5:38:e8:75:6c:ee:bb:c1:
81:8e:c4:07:9e:69:f0:92:d6:31:3f:df:01:12:f9:
b1:2a:5e:f6:b9:dc:c1:14:f1:5f:80:dd:c9:61:91:
bf:a3:20:29:70:ca:46:6f:9e:93:2f:fc:58:2e:2d:
23:65:41:8b:48:1c:6e:40:58:10:53:60:a0:e0:60:
79:d7:0b:7e:08:64:29:7d:6b:ab:fc:a5:ca:14:72:
93:4c:6f:42:90:ad:ba:92:f2:eb:d2:fc:2c:6d:b9:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:F5:C8:0C:3C:A8:2C:F4:8D:DA:BB:63:C6:04:6A:68:12:B7:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f111ff-acea-4be9-b356-54629b92b683/1/9Ub1yAw8qCz0jdq7Y8YEamgSt0M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:400::/29
Signature Algorithm: sha256WithRSAEncryption
5b:d3:ad:14:13:09:f7:08:25:fc:31:50:a3:bc:e1:4b:ae:eb:
90:a2:8e:24:c6:88:36:e2:9d:10:f6:e5:7e:ae:04:ae:be:b0:
7d:32:b3:d4:fa:bc:82:68:3b:07:73:87:24:6e:e9:c3:74:60:
e4:38:b9:ad:b2:e2:93:33:26:65:12:04:fd:00:96:1c:d9:50:
28:79:c3:20:b8:66:9f:a0:ac:b4:97:05:1b:0f:64:8b:47:c9:
28:6f:b1:9a:3e:37:4b:cb:84:e1:c5:87:e6:53:4c:58:ad:e0:
b0:d4:77:3b:a6:6a:75:0a:e9:52:d8:d1:c3:92:11:f3:c3:6a:
13:3f:d1:79:b2:bb:d4:1f:dd:c3:57:ed:e0:72:d9:02:de:c7:
63:94:c5:9a:50:5e:33:13:5a:03:ab:77:5f:53:9e:64:1c:8c:
79:39:84:2c:0e:75:2b:d6:a2:a5:cb:23:ce:67:70:dd:43:20:
4a:ae:94:24:2f:59:da:48:dd:f6:18:dc:ac:bf:b7:18:a2:30:
ab:1a:15:fa:c4:f4:e0:c4:1d:a8:ac:b2:12:7d:73:c6:c3:a4:
21:bd:88:f8:be:76:7f:e3:db:2f:6b:ce:ef:e0:0f:c0:08:37:
e1:df:51:d2:2f:65:80:03:65:50:ea:c2:fc:49:36:88:a4:e1:
cc:92:19:49
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZQf+hEJ6fP775XRmOpOEylyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTQ2ZjVjODBjM2NhODJjZjQ4ZGRhYmI2M2M2MDQ2YTY4MTJiNzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuIkbqfsbRG4dciKPZuMXlnrYPj6
sQNJ5H7PS8ihBqV51mukdh1DmfW0Rd6z5LfV3wAsWT0YxVH1aqLdoQKqluE05KpF
BfyKf6efaXwQfJ3x0t8R6HOU6mfK/YoXjG3xryPrX3VCO0D6zwzvoAJ6dGh+JeG5
h2XRbjFzRNTLPc1pJ5k/g6sdTKLAmvF98FmBRFjvvBM/Qao3F3/otTjodWzuu8GB
jsQHnmnwktYxP98BEvmxKl72udzBFPFfgN3JYZG/oyApcMpGb56TL/xYLi0jZUGL
SBxuQFgQU2Cg4GB51wt+CGQpfWur/KXKFHKTTG9CkK26kvLr0vwsbbnwmwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFPVG9cgMPKgs9I3au2PGBGpoErdDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IxL2YxMTFm
Zi1hY2VhLTRiZTktYjM1Ni01NDYyOWI5MmI2ODMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvZjExMWZm
LWFjZWEtNGJlOS1iMzU2LTU0NjI5YjkyYjY4My8xLzlVYjF5QXc4cUN6MGpkcTdZ
OFlFYW1nU3QwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUDKhQEADANBgkqhkiG9w0BAQsFAAOCAQEAW9Ot
FBMJ9wgl/DFQo7zhS67rkKKOJMaINuKdEPblfq4Err6wfTKz1Pq8gmg7B3OHJG7p
w3Rg5Di5rbLikzMmZRIE/QCWHNlQKHnDILhmn6CstJcFGw9ki0fJKG+xmj43S8uE
4cWH5lNMWK3gsNR3O6ZqdQrpUtjRw5IR88NqEz/RebK71B/dw1ft4HLZAt7HY5TF
mlBeMxNaA6t3X1OeZByMeTmELA51K9aipcsjzmdw3UMgSq6UJC9Z2kjd9hjcrL+3
GKIwqxoV+sT04MQdqKyyEn1zxsOkIb2I+L52f+PbL2vO7+APwAg34d9R0i9lgANl
UOrC/Ek2iKThzJIZSQ==
-----END CERTIFICATE-----
Generated at Mon Apr 14 00:25:41 2025 by rpki-client